What’s Vulnerable › Vulnerabilities

CVE-2011-0037

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-02-25 · updated 2026-06-16
• Weakness: CWE-20

Description

Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.

Affected products

• Microsoft Forefront Client Security: all versions
• Microsoft Forefront Endpoint Protection 2010: all versions
• Microsoft Malicious Software Removal Tool: all versions
• Microsoft Malware Protection Engine: through 1.1.6502.0; 0.1.13.192, 1.1.3520.0
• Microsoft Security Essentials: all versions
• Microsoft Windows Defender: all versions
• Microsoft Windows Live Onecare: all versions

References

• http://secunia.com/advisories/43468
• http://securitytracker.com/id?1025117
• http://www.microsoft.com/technet/security/advisory/2491888.mspx
• http://www.securityfocus.com/bid/46540
• http://www.vupen.com/english/advisories/2011/0486
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65626
• http://secunia.com/advisories/43468
• http://securitytracker.com/id?1025117
• http://www.microsoft.com/technet/security/advisory/2491888.mspx
• http://www.securityfocus.com/bid/46540
• http://www.vupen.com/english/advisories/2011/0486
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65626

Get alerted when CVE-2011-0037 or the next vulnerability affects your stack